> ## Documentation Index
> Fetch the complete documentation index at: https://flashapi.phs.vn/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Derivate

Generates an access token, refresh token, and OTP token for a derivative account.

### Endpoint

```text theme={null}
POST /oapi/auth/gen-secret-key/derivative
```

### Required body parameters

* `username` — Account username. Example: `022C099995`
* `password` — Account password. Example: `123456aA@`

### Response fields

* `access_token` (`string`) — Access token for authenticated requests.
* `refresh_token` (`string`) — Refresh token for renewing the session.
* `expires_in` (`number`) — Access token lifetime in seconds.
* `otp_token` (`string`) — OTP token returned by the authentication flow.
* `token_type` (`string`) — Token type. Example: `Bearer`

### cURL

```bash theme={null}
curl -X POST "$BASE_URL/oapi/auth/gen-secret-key/derivative" \
  -H "Content-Type: application/json" \
  -d '{
    "username": "022C099995",
    "password": "123456aA@"
  }'
```

### Python

```python theme={null}
import requests

BASE_URL = "https://api.example.com"

payload = {
    "username": "022C099995",
    "password": "123456aA@",
}

response = requests.post(
    f"{BASE_URL}/oapi/auth/gen-secret-key/derivative",
    json=payload,
)
response.raise_for_status()

print(response.json())
```

### Example response

```json theme={null}
{
    "access_token": "022C099995||KRYRTHUYUI||D5yF4ZPShG5lPNmS1hmO2JqZvj33Ht4qDDuhkhl1usufCEuYQC61BBCAb8iGNg6iGjCSzQInG7iHGPqYv505cgFuf0QcfZt4NPzgqGM1BRyCwvrvKI04gfOghRFFPZslfVaOf1ebwp408NVK9jlVJwa7ocUnmreHt6VHGHl6N3Lna6iwaM4YvXkDnPDbtMSLgmmiIGiOj6pZwyBw85KkrFRXf6jzONK3mK3P0n0r00OlSxZeRgh8L6Xd9jUt7WY",
    "refresh_token": "022C099995||KRYRTHUYUI||qe4rGLdBcb1b2ywraANFDbXSNNF8L8v0WPuAeGPd83u14CKCv57brGyZ9tvXGFACCjinBGuyQClOPTlkdzMIcBZR4PRE3ZOhceU3kywZ6VoqPC5aDrs38DqCUmPWALHP7iJIHV8pDinC0UQvAMGAZb1O2YHt0qT3tZH2vBkowzv1MAsWfO54xY6IUnQCgy3od5rF4A90AwwdscfWYhOVSKqIr4hoO6vEWQihxlDiCEhBIciuZ52Y7i2mEiq2IdU0",
    "expires_in": 28800,
    "otp_token": "2c897da51e69cd6f3a0701884ed706ac",
    "token_type": "Bearer"
}
```

### Error response

```json theme={null}
{
    "code": "OAPI_FNO_500",
    "messageParams": {
        "error": "server_error",
        "error_description": "-107 Tên đăng nhập hoặc mật khẩu không đúng",
        "s": 500
    },
    "params": null,
    "source": "oapi-bridge-fno",
    "message": null
}
```

> Replace `BASE_URL` with your API host. Upstream error messages can be returned in Vietnamese.